{"id":15867,"date":"2016-11-17T11:45:41","date_gmt":"2016-11-17T10:45:41","guid":{"rendered":"http:\/\/www.recantha.co.uk\/blog\/?p=15867"},"modified":"2016-11-18T10:05:28","modified_gmt":"2016-11-18T09:05:28","slug":"poisontap-is-a-raspberry-pi-zero-security-threat-worth-taking-note-of","status":"publish","type":"post","link":"https:\/\/www.recantha.co.uk\/blog\/?p=15867","title":{"rendered":"PoisonTap is a Raspberry Pi Zero security threat worth taking note of"},"content":{"rendered":"

\"Poison<\/a><\/p>\n

I wasn’t going to blog this as it’s a pretty horrid use of the Pi, but I wanted to highlight the security concern!<\/em><\/p>\n

PoisonTap is a Raspberry Pi Zero\/Node.js hacking machine. According to the maker’s website, it:<\/p>\n

siphons cookies, exposes internal router & installs web backdoor on locked computers<\/p><\/blockquote>\n

It plugs into the USB port of a computer and first of all tricks the host computer into thinking that it’s connecting to a network and then it intercepts unencrypted web traffic. It also stores cookies coming from the web browser and tells the computer to be a router, thus making it accessible remotely. And it does all this without the machine being unlocked<\/strong>.<\/p>\n

Read more about the PoisonTap by going to Samy Kamkar’s website<\/a>.<\/p>\n

It’s entirely up to you whether you try it out – just don’t blame me if you get in trouble!<\/i><\/p>\n

Dennis Fisher of On The Wire has interviewed Samy for his podcast – listen here<\/a>.<\/p>\n

Here’s a live demo of it working:<\/p>\n